DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
961be3d8f852723220db4938b6fb0404_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
961be3d8f852723220db4938b6fb0404_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
961be3d8f852723220db4938b6fb0404_JaffaCakes118
Size
12KB
MD5
961be3d8f852723220db4938b6fb0404
SHA1
df9941e76d2f12fd2f7c071ac2db93486fe6f65b
SHA256
95dba5c6382af82422e29f1a60d4d93dcc02aa9875ada78be8ddcc848a8caaf8
SHA512
1eaf38fa48f5696a753ccf74f2bdf4bbf99c78881b31f9c063e89a5ece0289d98e1cbe44437730c460a93c14d6dfedd6b18b1dfe4e697bcfbcfd64fb4c877f0d
SSDEEP
192:Z972w2nm+Fuw2axRJmjrJUrlQ7uBtjXy9G/belji0voiYs1W7cIW:ZR2wyv20RJmKrlQ7uBtXy92eljr3LW7I
Checks for missing Authenticode signature.
resource |
---|
961be3d8f852723220db4938b6fb0404_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTempFileNameA
GetTempPathA
Sleep
FreeLibrary
GetProcAddress
DeleteFileA
LoadLibraryA
GetVolumeInformationA
GetModuleFileNameA
ResumeThread
SetThreadContext
GetThreadContext
WriteProcessMemory
GetModuleHandleA
lstrcatA
GetTickCount
CreateThread
CopyFileA
lstrlenA
lstrcpyA
GlobalFree
CloseHandle
GlobalAlloc
wsprintfA
RegCreateKeyA
RegCloseKey
RegQueryValueA
RegOpenKeyA
RegSetValueExA
HttpSendRequestA
InternetSetOptionA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ